bitwarden-secret :

  • SA_PASSWORD
  • globalSettings__installation__id
  • globalSettings__installation__key
  • globalSettings__mail__smtp__password
  • globalSettings__mail__smtp__username

values.yaml:

YAML
component:
  admin:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/admin
      tag: ''
    labels: {}
    livenessProbe:
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 300
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 5
      periodSeconds: 5
    resources:
      limits:
        cpu: 250m
        memory: 384Mi
      requests:
        cpu: 125m
        memory: 256Mi
    securityContext: {}
    tolerations: []
  api:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/api
      tag: ''
    labels: {}
    livenessProbe:
      failureThreshold: 5
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 120
      periodSeconds: 120
      timeoutSeconds: 180
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 5
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 120
      periodSeconds: 120
      timeoutSeconds: 180
    resources:
      limits:
        cpu: 200m
        memory: 256Mi
      requests:
        cpu: 100m
        memory: 128Mi
    securityContext: {}
    tolerations: []
  attachments:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/attachments
      tag: ''
    labels: {}
    livenessProbe:
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 30
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 5
      periodSeconds: 5
    resources:
      limits:
        cpu: 100m
        memory: 128Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext: {}
    tolerations: []
  events:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/events
      tag: ''
    labels: {}
    livenessProbe:
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 30
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 5
      periodSeconds: 5
    resources:
      limits:
        cpu: 100m
        memory: 128Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext: {}
    tolerations: []
  icons:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/icons
      tag: ''
    labels: {}
    livenessProbe:
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 30
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 5
      periodSeconds: 5
    resources:
      limits:
        cpu: 100m
        memory: 128Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext: {}
    tolerations: []
  identity:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/identity
      tag: ''
    labels: {}
    livenessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 120
      periodSeconds: 60
      timeoutSeconds: 30
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 60
      periodSeconds: 120
      timeoutSeconds: 60
    resources:
      limits:
        cpu: 200m
        memory: 256Mi
      requests:
        cpu: 100m
        memory: 128Mi
    securityContext: {}
    tolerations: []
  notifications:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/notifications
      tag: ''
    labels: {}
    livenessProbe:
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 30
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 5
      periodSeconds: 5
    resources:
      limits:
        cpu: 100m
        memory: 128Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext: {}
    tolerations: []
  scim:
    annotations: {}
    deploymentStrategy: RollingUpdate
    enabled: false
    image:
      repository: ghcr.io/bitwarden/scim
      tag: ''
    labels: {}
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    resources:
      limits:
        cpu: 100m
        memory: 128Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext: {}
    tolerations: []
  sso:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/sso
      tag: ''
    labels: {}
    livenessProbe:
      failureThreshold: 5
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 90
      periodSeconds: 60
      timeoutSeconds: 60
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /alive
        port: 5000
      initialDelaySeconds: 5
      periodSeconds: 5
    resources:
      limits:
        cpu: 100m
        memory: 128Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext: {}
    tolerations: []
  web:
    annotations: {}
    deploymentStrategy: RollingUpdate
    image:
      repository: ghcr.io/bitwarden/web
      tag: ''
    labels: {}
    livenessProbe:
      httpGet:
        path: /
        port: 5000
      initialDelaySeconds: 30
    nodeSelector: {}
    podAnnotations: {}
    podLabels: {}
    podSecurityContext: {}
    podServiceAccount: ''
    readinessProbe:
      failureThreshold: 3
      httpGet:
        path: /
        port: 5000
      initialDelaySeconds: 5
      periodSeconds: 5
    resources:
      limits:
        cpu: 100m
        memory: 128Mi
      requests:
        cpu: 50m
        memory: 64Mi
    securityContext: {}
    tolerations: []
database:
  annotations: {}
  enabled: true
  image:
    name: ''
    repository: mcr.microsoft.com/mssql/server
    tag: 2022-CU12-ubuntu-22.04
  labels: {}
  nodeSelector: {}
  podAnnotations: {}
  podLabels: {}
  podSecurityContext: {}
  podServiceAccount: ''
  resources:
    limits:
      cpu: 500m
      memory: 2G
    requests:
      cpu: 100m
      memory: 2G
  securityContext: {}
  tolerations: []
  updateStrategy: OnDelete
  volume:
    backups:
      annotations: {}
      labels: {}
      size: 1Gi
    data:
      annotations: {}
      labels: {}
      size: 10Gi
    log:
      annotations: {}
      labels: {}
      size: 10Gi
fullnameOverride: ''
general:
  admins: david.saves@me.com
  annotations: {}
  cloudRegion: EU
  coreVersionOverride: ''
  databaseProvider: mssql
  disableUserRegistration: 'false'
  domain: vault.dsvs.ddns.net
  email:
    replyToEmail: davsvs@gmail.com
    smtpHost: smtp.gmail.com
    smtpPort: '587'
    smtpSsl: 'false'
    smtpSslOverride: 'false'
    smtpStartTls: 'true'
    smtpTrustServer: 'false'
  enableCloudCommunication: false
  ingress:
    annotations:
      kubernetes.io/ingress.class: traefik
    className: traefik
    enabled: false
    labels: {}
    paths:
      admin:
        path: /admin
        pathType: Prefix
      api:
        path: /api/
        pathType: Prefix
        pathAnnotations:
          traefik.ingress.kubernetes.io/router.middlewares: bitwarden/bitwarden-self-host-middleware-stripprefix
      attachments:
        path: /attachments/
        pathType: Prefix
        pathAnnotations:
          traefik.ingress.kubernetes.io/router.middlewares: bitwarden/bitwarden-self-host-middleware-stripprefix
      events:
        path: /events/
        pathType: Prefix
        pathAnnotations:
          traefik.ingress.kubernetes.io/router.middlewares: bitwarden/bitwarden-self-host-middleware-stripprefix
      icons:
        path: /icons/
        pathType: Prefix
        pathAnnotations:
          traefik.ingress.kubernetes.io/router.middlewares: bitwarden/bitwarden-self-host-middleware-stripprefix
      identity:
        path: /identity/
        pathType: Prefix
        pathAnnotations:
          traefik.ingress.kubernetes.io/router.middlewares: bitwarden/bitwarden-self-host-middleware-stripprefix
      notifications:
        path: /notifications/
        pathType: Prefix
        pathAnnotations:
          traefik.ingress.kubernetes.io/router.middlewares: bitwarden/bitwarden-self-host-middleware-stripprefix
      scim:
        path: null
        pathType: null
      sso:
        path: /sso/
        pathType: Prefix
        pathAnnotations:
          traefik.ingress.kubernetes.io/router.middlewares: bitwarden/bitwarden-self-host-middleware-stripprefix
      web:
        path: /
        pathType: Prefix
    tls:
      clusterIssuer: null
      name: null
  labels: {}
  nodeSelector: {}
  podAnnotations: {}
  podLabels: {}
  refreshTokens:
    absoluteRefreshTokenLifetimeSeconds: '30'
    applyAbsoluteRefreshTokenOnRefreshToken: 'true'
    enabled: false
    slidingRefreshTokenLifetimeSeconds: ''
  sso:
    enforceSsoPolicyForAllUsers: false
  tolerations: []
  volumeAccessMode: ReadWriteMany
  webVersionOverride: ''
jobs:
  cleanup:
    annotations: {}
    enabled: true
    labels: {}
    podAnnotations: {}
    podLabels: {}
    resources:
      limits:
        memory: 64Mi
      requests:
        memory: 32Mi
  db:
    postInstallMigrator:
      annotations: {}
      labels: {}
      podAnnotations: {}
      podLabels: {}
      resources:
        limits:
          memory: 64Mi
        requests:
          memory: 32Mi
    preInstallMigrator:
      annotations: {}
      labels: {}
      podAnnotations: {}
      podLabels: {}
      resources:
        limits:
          memory: 64Mi
        requests:
          memory: 32Mi
  podSecurityContext: {}
  secret:
    annotations: {}
    labels: {}
    podAnnotations: {}
    podLabels: {}
    resources:
      limits:
        memory: 64Mi
      requests:
        memory: 32Mi
  securityContext: {}
  setup:
    annotations: {}
    labels: {}
    podAnnotations: {}
    podLabels: {}
    resources:
      limits:
        memory: 64Mi
      requests:
        memory: 32Mi
nameOverride: ''
rawManifests:
  postInstall:
    - apiVersion: traefik.io/v1alpha1
      kind: Middleware
      metadata:
        name: bitwarden-self-host-middleware-stripprefix
      spec:
        stripPrefix:
          prefixes:
            - /api
            - /attachments
            - /icons
            - /notifications
            - /events
            - /scim
    - apiVersion: traefik.io/v1alpha1
      kind: IngressRoute
      metadata:
        name: bitwarden-self-host-ingress
      spec:
        entryPoints:
          - websecure
        routes:
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/`)
            services:
              - kind: Service
                name: bitwarden-self-host-web
                passHostHeader: true
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/api/`)
            middlewares:
              - name: bitwarden-self-host-middleware-stripprefix
            services:
              - kind: Service
                name: bitwarden-self-host-api
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/attachments/`)
            middlewares:
              - name: bitwarden-self-host-middleware-stripprefix
            services:
              - kind: Service
                name: bitwarden-self-host-api
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/icons/`)
            middlewares:
              - name: bitwarden-self-host-middleware-stripprefix
            services:
              - kind: Service
                name: bitwarden-self-host-icons
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/notifications/`)
            middlewares:
              - name: bitwarden-self-host-middleware-stripprefix
            services:
              - kind: Service
                name: bitwarden-self-host-notifications
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/events/`)
            middlewares:
              - name: bitwarden-self-host-middleware-stripprefix
            services:
              - kind: Service
                name: bitwarden-self-host-events
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/scim/`)
            middlewares:
              - name: bitwarden-self-host-middleware-stripprefix
            services:
              - kind: Service
                name: bitwarden-self-host-scim
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/sso/`)
            services:
              - kind: Service
                name: bitwarden-self-host-sso
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/identity/`)
            services:
              - kind: Service
                name: bitwarden-self-host-identity
                port: 5000
          - kind: Rule
            match: Host(`vault.dsvs.ddns.net`) && PathPrefix(`/admin`)
            services:
              - kind: Service
                name: bitwarden-self-host-admin
                port: 5000
        tls:
          clusterIssuer: null
          name: null
  preInstall: []
secrets:
  identityCertificate:
    generate: true
    secretName: ''
  secretKeys:
    generate: true
  secretName: bitwarden-secret
  secretProviderClass: ''
serviceAccount:
  deployRolesOnly: false
  name: service-account
sharedStorageClassName: longhorn
supportComponents:
  certGenerator:
    image:
      name: ''
      repository: alpine/openssl
      tag: 3.5.2
  dbMigrator:
    image:
      name: ''
      repository: ghcr.io/bitwarden/mssqlmigratorutility
      tag: ''
  kubectl:
    image:
      name: ''
      repository: ghcr.io/bitwarden/helm-charts/kubectl
      tag: 1.34
volume:
  attachments:
    labels: {}
    size: 1Gi
  caCertificates:
    configMapName: cacert
    enabled: false
  dataprotection:
    labels: {}
    size: 1Gi
  licenses:
    labels: {}
    size: 1Gi
  logs:
    enabled: false
    labels: {}
    size: 1Gi

disableUserRegistration: 'false'